Research on the Security Reinforcement Method of Industrial Internet Identification Data Based on Blockchain Technology
Yitong Liu, Caiyun Liu, Jun Li, Yan Sun · 2023
The industrial Internet identity resolution system provides coding, registration and resolution services for industrial equipment, machines, parts and products. Similar to the domain name resolution system for the Internet, the industrial Internet identity resolution system is the nerve center of the industrial Internet and an important infrastructure for the interconnection, resource scheduling and production coordination of the entire network. However, with the rapid development of the industrial Internet, the number of industrial Internet identifications has soared, and the number of concurrent parsing requests can reach tens of millions. Vulnerabilities in the architecture, protocol, operation, identity and other aspects of the identity parsing system have gradually emerged. Attackers can use the hierarchical tree architecture to carry out DDoS attacks, monitor the identity parsing session to carry out man-in-the-middle attacks, and carry out cache poisoning attacks through recursive parsing server mixed with malicious data, Due to the low latency, high concurrency, zero error and other business requirements of industrial production sites, traditional security protection measures are difficult to work. This paper proposes an industrial Internet identification data security reinforcement method IICC (Industrial Internet Identification Cache Chain) based on blockchain technology: build the industrial Internet identification recursive parsing service on the blockchain, design the recursive parsing node selection protocol based on the idea of load balancing, dynamically and randomly select any blockchain node to provide identification parsing service, and solve the problems of DDoS attack and single point failure; The identification data verification algorithm is designed based on the consensus mechanism, and the validity of the updated mapping record is verified through the positive and negative verification mechanism, which solves the cheating problem caused by the single-source resolution of industrial Internet identification such as buffer poisoning. This paper deploys and builds the above scheme based on Ethereum, and compares it with the baseline system to prove the availability, security and efficiency of the scheme.